Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
File: l9I64ozYYMjt_WGDVvizH15NySg.mft (raw, json)
Hash identifier: lI6uD9BEm9Q1c2BENYxW0ouvRrZAF0qqlxHw6vBTlvU=
Subject key identifier: 50:1B:58:FF:3F:2B:30:25:AF:5E:78:FD:19:8D:87:20:D3:60:59:10
Authority key identifier: 97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
Certificate issuer: /CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Certificate serial: 019D390A0CF9A3746E1B052D47E1452C5564
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
Manifest number: 0B9F
Signing time: Sun 29 Mar 2026 10:00:53 +0000
Manifest this update: Sun 29 Mar 2026 10:00:53 +0000
Manifest next update: Mon 30 Mar 2026 10:00:53 +0000
Files and hashes: 1: 4C1BpphaktIg8MA2zeClb4YsyU4.roa (hash: imbIDYBoq85nxOoVD1lZJskVrwlvW9PzNxybvG5zr1Y=)
2: VTOF1mAuOAY_-tLdNMoe_pcrjMQ.roa (hash: jtjYRNSSBZQBAMWJxgI/LVkURXr1s2BmDS5NjL+Hzks=)
3: l9I64ozYYMjt_WGDVvizH15NySg.crl (hash: gNXwGLpN+ynCUJLDiMPCt3fmihZb0MAPzILvEh47pDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:0c:f9:a3:74:6e:1b:05:2d:47:e1:45:2c:55:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97d23ae28cd860c8edfd618356f8b31f5e4dc928
Validity
Not Before: Mar 29 10:00:53 2026 GMT
Not After : Mar 30 10:00:53 2026 GMT
Subject: CN=501b58ff3f2b3025af5e78fd198d8720d3605910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d0:58:92:f1:09:3d:a6:74:81:e3:98:51:1a:
f2:37:4e:76:85:58:f1:c5:fa:82:ea:d1:95:bd:d1:
99:1e:78:6f:d2:f2:89:76:16:ae:44:23:22:0b:5e:
eb:0c:5a:52:59:58:b4:c4:56:bc:66:e6:77:5e:54:
27:29:75:d3:f1:c0:6e:02:4f:64:64:34:30:cc:83:
0c:ec:87:f3:40:a4:82:c5:08:d6:e1:1c:43:a8:79:
2a:6f:fd:71:16:42:c8:ec:a1:29:cd:82:64:72:b6:
7a:17:a5:c7:87:26:ce:91:a5:de:ad:8b:b3:33:14:
2c:ce:a4:56:94:7a:24:f7:90:bd:cc:81:09:d6:f7:
45:be:db:1b:6a:19:cb:8d:c6:5c:dd:0a:8a:e8:ef:
21:73:9d:4c:d4:e7:d3:04:11:3c:0a:fc:2b:a5:13:
cf:a2:46:1d:93:f4:4d:37:85:79:1c:ac:10:54:31:
74:89:71:6d:ad:ab:67:61:07:c5:f4:6b:ea:4d:c3:
53:56:8c:53:bf:59:1c:2b:4c:f8:5e:43:16:07:98:
ee:aa:da:f4:9c:07:08:65:32:1f:5d:31:32:69:bd:
9b:ee:fa:0d:5c:da:38:ce:c6:f8:eb:18:76:01:f9:
1b:23:3c:dc:92:ba:07:d1:a0:9e:86:21:09:a9:bc:
e4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1B:58:FF:3F:2B:30:25:AF:5E:78:FD:19:8D:87:20:D3:60:59:10
X509v3 Authority Key Identifier:
keyid:97:D2:3A:E2:8C:D8:60:C8:ED:FD:61:83:56:F8:B3:1F:5E:4D:C9:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l9I64ozYYMjt_WGDVvizH15NySg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/ca641f-db3a-4f64-a25b-cfa6a91481e2/1/l9I64ozYYMjt_WGDVvizH15NySg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:7a:bb:cc:5a:2e:b2:bf:05:3a:7f:b9:bf:82:4e:97:7c:9d:
8e:0f:92:3b:fa:d1:13:bf:32:c4:37:9d:94:d8:89:9a:61:c2:
68:fa:ca:b7:db:eb:f0:d8:26:39:d6:ae:3a:13:18:f2:81:96:
16:04:dd:29:0f:4e:f0:5b:11:c8:d2:7d:26:5c:b3:0d:05:5e:
bf:89:fa:73:2c:9b:d0:dd:4a:2f:91:c3:d3:6e:aa:d9:68:7f:
c8:ab:53:b9:87:69:ea:68:72:2d:71:8f:5f:63:d2:9d:54:48:
a7:08:ed:9d:df:1c:41:3c:fb:ac:88:57:b1:ad:12:c5:dc:5b:
6d:35:d0:3d:2b:9c:f3:4e:0a:e0:d2:87:84:d2:56:c9:be:d4:
3e:c0:eb:6c:75:e3:0b:85:6f:92:29:2b:af:86:2e:5f:d3:2e:
09:86:2b:4d:fa:b2:8a:f5:cf:e1:07:c9:02:2c:19:13:d4:f8:
48:a9:a7:0b:6f:84:cf:33:8e:fd:c5:44:4a:ec:06:3e:fe:1c:
73:44:69:55:62:e1:b9:62:1e:88:8a:0a:b1:8c:7c:fc:60:24:
29:67:d3:7b:a4:66:28:53:90:75:cb:44:b1:b2:1f:ca:03:35:
28:45:db:78:01:cd:73:5d:8d:b0:47:24:81:94:8a:36:e4:9f:
ca:b0:c4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:07:39 2026 by rpki-client